Delivery
The Evernow 120-day roadmap
Days 1–30: Discovery & Gap
Automated personal data discovery (Securiti / Purview), interviews with 6–10 areas, legal-basis matrix and gap vs. LGPD / ANPD.
Days 31–60: Foundations
ROPA (data inventory) live in a platform, DPIA on critical flows, privacy notice, contracts with operators, retention policy.
Days 61–90: Controls
Consent management, data-subject-request portal, DLP on critical flows, pseudonymization/encryption on sensitive datasets, cookie banner at ANPD standard.
Days 91–120: Evidence & Governance
Incident playbook with 72h ANPD flow, indicator dashboard, internal training, first privacy committee, ready evidence binder.
Ongoing: DPO as a Service
Certified DPO on retainer, monthly follow-ups, ANPD response, audit support, continuous improvement.
Executive KPIs
% mapped data assets, % flows with legal basis, MTTR for data-subject requests, open DPIAs, residual risk score.
